Borrowing it
Nothing to install: this file belongs to OpenAgentsInc/openagents. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/OpenAgentsInc/openagents/main/.agents/skills/nostr/SKILL.mdgit clone --depth 1 https://github.com/OpenAgentsInc/openagentsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/openagentsinc/openagents/nostr)<a href="https://agentmods.dev/skills/openagentsinc/openagents/nostr"><img src="https://agentmods.dev/badge/skills/openagentsinc/openagents/nostr/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/openagentsinc/openagents/nostr"><img src="https://agentmods.dev/badge/skills/openagentsinc/openagents/nostr.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00144 | $0.06852 |
| Opus 5.5 | $0.00058 | $0.02741 |
| Sonnet 5.5 | $0.00029 | $0.01370 |
| Haiku 4.5 | $0.00014 | $0.00685 |
Grade A, and why
nostr scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 472 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Nostr in OpenAgents
Use this skill when you change or debug anything that touches a relay:
the protocol crates, the relay binary, the Coder relay door, the worker,
or a specification under nips/. The specifications are the source of
truth; this skill tells you where they are and how the pieces fit, so you
don't rediscover the flow from code.
Where the specifications live
| Lane | Path | Source of truth | Synced |
|---|---|---|---|
| Official NIPs | nips/official/ |
nostr-protocol/nips | yes, ./scripts/sync-nips.sh |
| Block (Buzz) extension NIPs | nips/block/ |
block/buzz | yes |
| OpenAgents NIPs | nips/openagents/ |
this repository | no — the files here are authoritative |
nips/manifest.json pins the upstream commit of each synced lane. A sync
never changes the implementation without review and a fixture update.
nips/README.md states the mandate: every pinned spec that applies to a
relay is an implementation target for crates/nostr and
crates/nostr-relay, optional features stay fail-closed and out of NIP-11
until they run, and client-only NIPs are implemented as fixture-backed
clients rather than pretended.
Read the September 26 upstream review and implementation coverage before assuming complete support. Source inventory checks now track the current pins separately from behavioral evidence. PMA 30179 is rejected, client-authored 39007 is refused, and app data and private artifacts have explicit visibility. RS has an opt-in atomic HTTP snapshot. The PL executor is off by default and needs a credential-holding push gateway; no real device delivery is recorded. Client helpers do not imply complete AP, FI, CW-thread, or RS merge integration.
Read the spec before the code. The files you need most often:
nips/official/01.md— the protocol: events, kinds, filters, and the client-relay messages.nips/official/42.md— client authentication to a relay.nips/official/44.md— encrypted payloads.nips/official/11.md— the relay information document.nips/official/40.md— theexpirationtag.nips/official/19.md—npubandnsecencoding.nips/block/README.md— a per-spec summary of all 17 Block NIPs.nips/openagents/NIP-CJ.md— Coder jobs, the protocol betweencoderandcoder-worker.nips/openagents/NIP-DEC.md— decisions: typed questions with structured (EntryType) instructions and criteria, carried by the CJ decision family.nips/openagents/NIP-CAP.md— capability manifests and presence.nips/openagents/NIP-PRG.md— programs.nips/openagents/NIP-EXT.md— extension releases, discovery, revocation, foreign-format import, and compatible host component-set assessments.nips/openagents/NIP-REG.md— curated plugin registries, exact publisher release pins, per-registry trust, and signed Nostr and GitHub/HTTPS sources.nips/openagents/NIP-RUN.md— encrypted durable journals and recovery.nips/openagents/NIP-CTX.md— task frames, evidence views, and expansion.nips/openagents/NIP-POL.md— instructions, approvals, disclosure, routing records, and governed activation of learned private preferences.nips/openagents/NIP-COORD.md— task claims, fencing, and background findings.nips/openagents/NIP-EVAL.md— attributable workload evaluation and promotion evidence.nips/openagents/NIP-OPT.md— semantic AI contracts, immutable implementations, bounded studies, actual candidate execution, and optimization evidence.nips/openagents/NIP-XP.md— quests, referee awards of accepted outcomes, revocations, and per-reader XP ledgers;crates/nostr(xp) checks them.nips/openagents/NIP-KB.md— shared knowledge entries, heads, withdrawals, and evidence;crates/nostr(kb) checks them.nips/openagents/NIP-CTRL.md— task-scoped client pairing, observation, steering, and cancellation; no approval or wallet authority from pairing.nips/openagents/NIP-MKT.md— negotiated offerings, bilateral orders, private records, and separately admitted fixed-price Lightning settlement.nips/openagents/NIP-LAB.md— bounded agent labor, exact execution linkage, deliverables, independent checks, rework, disputes, acceptance, and rights.nips/openagents/NIP-X402.md— Designed Lightning-paid operations before execution, standard x402 HTTP/MCP bindings, and an opt-in native Nostr profile.nips/openagents/NIP-SESS.md— engine sessions, actual adapter support, queues, turn control, pending interactions, and retained native history.nips/openagents/NIP-WS.md— workspace/resource identity, conditional edits, checkpoints, and bounded projection snapshots, deltas, and cuts.nips/openagents/NIP-WORK.md— tracked objectives, planning relationships, accountable ownership, delegation, exact revisions, and work disposition.nips/openagents/NIP-AUTO.md— durable schedules, source watches, bounded goal continuations, occurrence identity, and restart-safe accounting.nips/openagents/NIP-ENV.md— execution environment leases, actual materialization, attachment, cleanup, and uncertain resource accounting.nips/openagents/NIP-LIVE.md— admitted media/capture, participants and recipients, input and speaking floors, evidence, and scoped device input.nips/openagents/NIP-REACH.md— private host directory, bounded presence, reachability, and authenticated direct channels. Placement grants no rights.nips/openagents/NIP-HOST.md— host-wide device enrollment and scoped grants; access rights do not supply POL approval or spending authority.nips/openagents/NIP-TERM.md— host-owned interactive terminals, bounded output replay, explicit gaps, and current access checks.nips/openagents/NIP-SOV.md— Designed successor to historical SA: durable identity, supported custody, bounded AUTO lifecycle, POL guardians, treasury policy, and retained recovery evidence. It allocates no new event kinds.nips/openagents/NIP-MV.md— Verse world presence, entity state, and gestures; independent of the shared agent-artifact contracts.docs/optimization/README.md— DSPy/GEPA concepts, Gym evaluation, host boundaries, and a consolidated unfiled integration backlog.nips/openagents/contracts.md— pinned identities, schemas, locks, evidence, context, effects, outcomes, and private artifact envelopes for the v1 contracts.docs/coder/design/typesafe-agent-protocol-addendum.md— what belongs in Nostr and what hosts/clients must implement; complete source-proposal coverage.docs/protocol/implementation-plan.md— implementation across all lanes.docs/agents/README.mdanddocs/agents/roadmap.md— general agent infrastructure, Coder's domain boundary, and remaining non-code contracts.docs/protocol/block-nips.md— what the relay does with each Block NIP, including what it deliberately doesn't advertise.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed · +1 tokens per session 4706c27c7e93
- 7d ago Changed · +15 lines 0bd763a19048
- 8d ago Changed · +24 lines 30c0f30494cf
- 17d ago Changed · +4 lines 007c65c8922c
- 23d ago Changed · +2 lines 320d2b5bb6ee
- 25d ago Changed · +3 lines 32410590b639
- 27d ago Changed · +85 lines 627ce777325d
- 1mo ago Changed · +13 lines d472a5f552a0
- 1mo ago First seen · 326 lines · 143 tokens per session scan A c5d7c6029316
nostr is a skill published in the GitHub repository OpenAgentsInc/openagents (458 stars, last pushed today), licensed Apache-2.0. It adds 144 tokens to every session and 6,852 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-21.
Other skills, from other repositories
signature-replay
Signature replay attacks — missing nonces, missing chain ID, ecrecover zero address, signature malleability, cross-chain replay.
official-sui-skills
Pointer to the official Mysten Labs skills for building on Sui — language fundamentals, object model, PTBs, SDKs, publishing, upgrades, frontend integration, accessing on-chain data. Maintained upstream at github.com/MystenLabs/skills; pinned to the same ref the audit catalog derives from (see…
bridge
Cross-chain token transfers using Wormhole and CCTP.
onchainkit
Build onchain apps with Coinbase's OnchainKit React components - wallets, swaps, NFTs, payments.
marginfi
MarginFi — Solana lending and borrowing.
devtools-event-client
Create typed EventClient for a library. Define event maps with typed payloads, pluginId auto-prepend namespacing, emit()/on()/onAll()/onAllPluginEvents() API. Connection lifecycle (5 retries, 300ms), event queuing, enabled/disabled state, SSR fallbacks, singleton pattern. Unique pluginId requirement to avoid event…